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Abstract. Network coding is often explained by using a small network model called Butterfly. In 
this network, there are two flow paths, s\ to t\ and S2 to t2, which share a single bottleneck channel 
of capacity one. So, if we consider conventional flow (of liquid, for instance), then the total amount 
of flow must be at most one in total, say 1/2 for each path. However, if we consider information flow, 
then we can send two bits (one for each path) at the same time by exploiting two side links, which 
are of no use for the liquid-type flow, and encoding/decoding operations at each node. This is known 
as network coding and has been quite popular since its introduction by Ahlswede, Cai, Li and Yeung 
in 2000. In QIP 2006, Hayashi et al showed that quantum network coding is possible for Butterfly, 
namely we can send two qubits simultaneously with keeping their fidelity strictly greater than 1/2. 

In this paper, we show that the result can be extended to a large class of general graphs by using a 
completely different approach. The underlying technique is a new cloning method called entanglement- 
free cloning which does not produce any entanglement at all. This seems interesting on its own and to 
show its possibility is an even more important purpose of this paper. Combining this new cloning with 
approximation of general quantum states by a small number of fixed ones, we can design a quantum 
network coding protocol which "simulates" its classical counterpart for the same graph. 

1 Introduction 

In some cases, digital information flow can be done much more efficiently than conventional (say, 
liquid) flow. For example, consider the Butterfly network in Fig. 1 having directed links of capacity 
one and two source-sink pairs s\ to ti and S2 to t2- Apparently, both paths have to go through the 
single link from sq to to (the two side links from si to t2 and S2 to t\ are of no use at all) and hence 
the total amount of flow is bounded by one, say 1/2 for each pair. For information flow, however, we 
can send two bits, x and y, simultaneously by using the protocol in Fig. 2. Such a protocol, by which 
we can effectively achieve larger channel capacity than can be achieved by simple routing, has been 
referred to as network coding since its introduction in [2]. 

In [10], the authors proved that quantum network coding (QNC) is possible for the same Butterfly 
network, namely, we can send two qubits simultaneously with keeping their fidelity strictly greater 
than 1/2. They also showed that QNC is no longer possible or the worst-case fidelity becomes 1/2 or 
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less, if we remove the two side links. Classical network coding (CNC) for this reduced network is also 
impossible. Thus, CNC and QNC are closely related in Butterfly and we are naturally interested in a 
similar relation for general graphs. A typical question to this end is whether QNC is possible for the 
graph class G(^2) (including Butterfly and many others, see e.g., [UE]) which allows CNC by using 
linear operations over F2 at each node. This has been an obvious open question since |10| . 

The crucial difference between CNC and QNC happens at a node with two or more outgoing 
edges, where we need some kind of "copy" operation, (si, S2 and to i n Fig- 1 are such nodes.) In 
the case of CNC, nothing is hard; just a usual copy operation is optimal. In the case of QNC, we 
first encounter the famous no-cloning theorem [18]. This difficulty might be bypassed by using the 
approximate cloning by Buzek and Hillery [1] with a sacrifice of fidelity, but then arises another much 
more serious problem; entanglement between cloned states. Note that entanglement extends to the 
whole graph. In [ID] , our analysis needed to explicitly observe the total state on the seven edges of 
the Butterfly network. It is very unlikely that we can stay on the same approach for general graphs. 

Our Contribution. In this paper, we give a positive answer to the open question even for the 
much larger graph class Q^: the graph class which allows some nonlinear operations over a size- four 
alphabet to achieve CNC. Q4 includes the above G(^2) and also many other graphs for which linear 
operations are not enough for CNC (see the next section for details). For a given G in G4 and a CNC 
protocol which sends any one letter in the alphabet correctly from each source to sink, we can design 
a QNC protocol which sends an arbitrary qubit similarly with fidelity > 1/2. 

Our key technique is a new cloning method called entanglement-free cloning, which we believe 
is interesting in its own right. By using this cloning at each branching node, we no longer need to 
observe the entire state of G explicitly but it is enough to calculate the quantum state at each node 
independently. Combining this with approximation of quantum states by four fixed ones, we can design 
a QNC protocol which "simulates" the given CNC protocol. 

Related Work. [10] inspired several studies on quantum network coding. Shi and Soljanin [16] 
investigated the quantum network coding for the so-called multi-cast problem where the graph has 
only one source node. Leung, Oppenheim and Winter [13] discussed an asymptotic limit of quantum 
network coding for graphs of low depth, including the Butterfly network. [11] showed the impossibility 
of the (4, l)-quantum random access coding and its relation to quantum network coding 

Quantum cloning has been one of the most popular topics. Its studies are divided into the two 
types; the universal cloning and the state-dependent cloning. The universal cloning, initiated by Buzek 
and Hillery [3] , and its successors (say, [31 El [T7] ) produce approximated copies of any quantum state 
equally well. On the other hand, the input of the state-dependent cloning is restricted to a fixed set 
of quantum states, which has two different directions (and their hybrid such as [6]). The first one, 
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introduced in [12] and further studied in [3], is to seek a better quality by limiting the input of the 
universal cloning into fixed states. The goal of the second approach is to exactly clone quantum states 
in a probabilistic manner, so this is called the probabilistic cloning. The probabilistic cloning was 
proposed by Duan and Guo [8] and seems most related to ours (see Sec. 13.41 for further details). 

2 Classical and Quantum Network Coding 

2.1 Classical Network Coding 

For (classical) network coding, an instance is given as a directed acyclic graph G = (V,E), a set 
S = {si, . . . , s n } C V of n source nodes, a set T = {ti, . . . , t m } C V of m sink nodes and a source-sink 
requirement given by a mapping a : {1, . . . , m} — ► {1, . . . , n}, meaning that an input value on node Sj 
should be sent to node(s) tj such that a(j) = i. (Precisely, this does not contain the case that the sink 
requires multiple sources, but it is easy to adapt our result to that case.) Each link e £ E has a unit 
capacity, i.e., it can transmit a single letter in a fixed alphabet £. A network code (or a protocol) for G, 
denoted by Pc(G), is defined by I functions (called operations) f v j: £ fc — ► £, j = 1, 2, . . . , I, for each 
vertex u G V with indegree k and outdegree i. We say that classical network coding (CNC) is possible 
if there is a protocol such that input values (xi, ■ ■ ■ , x n ) given to the source nodes S = {s±, . . . , s n } 
imply the output values (yi, . . . , y m ) on the sink nodes T = {ti, . . . , t m } such that yj = x a ^y 

Li, Yeung and Cai showed in p3| that if G has only one source, linear operations are enough, 
i.e., if CNC is possible for such a graph, it is possible only by using linear operations over a finite 
(but maybe large) field. However, this is not the case for graphs with two or more sources: The first 
example, known as the Koetter's example, was given in [15] where it is shown that the graph does not 
have a linear CNC even if its alphabet size is arbitrarily large, but does have a CNC if "vector" linear 
operations over an alphabet of size four (actually F|) are allowed. Very recently another example 
appeared in [TJ, which does not have a vector linear CNC over any alphabet, but has a CNC if we 
allow some non-linear operations over a size-four alphabet. 

In this paper we consider the following operations over a size-four alphabet which covers both [Td] 
and [7J: Let £4 = {00, 01, 10, 11} and let v be a node of indegree m. Then if the values of m incoming 
edges are X\, . . . ,X m G £4, then the output of each outgoing edge can be written as YliLx hi(Xi). 
Here, the summation is taken under the additive groups Z4 or Z2 ® Z2 (note that additive groups over 
£4 includes only Z4 and Z2 © Z2), and hi (i = l,...,m) is any constant, one-to-one or two-to-one 
mapping over £4. If G has a CNC under these operations, we say that G is in the graph class Q±. As 
mentioned before, Q4 includes both examples in [15] and [TJ, and of course all the graphs (including 
Butterfly) for which CNC is possible by linear operations of size two and four. 

2.2 Quantum Network Coding 

In quantum network coding (QNC), we suppose that each link of the graph G is a quantum channel of 
capacity one, i.e., it can transmit a single quantum bit. At each node, any trace-preserving completely- 
positive (TP-CP) map is allowed. A protocol Pq(G) is given as a set of these operations at each node. 
We say that QNC is possible for a given graph G if there is a protocol Pq(G) which determines, for 
given input qubits \ipi), ■ ■ ■ , \ip n ) on the n source nodes, outputs pi, . . . ,p m on the sink nodes such 
that the fidelity between pj and |^> CT (j)) is greater than 1/2. (Thus the inputs are pure qubits without 
entanglement and the output may be general mixed states. We often use bold fonts for density matrices 
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for exposition.) Our main goal of this paper is to show that QNC is possible for any graph G in Q4, in 
other words, we can design a legitimate protocol Pq(G) from a given graph G in and its classical 
protocol Pc{G). 

3 Entanglement-Free Cloning 

3.1 Basic Ideas of Designing Pq(G) 

Our QNC is based on the following ideas: (i) If we carefully select a small number (say, four) of fixed 
quantum states, then any quantum state can be "approximated" by one of them, (ii) Therefore, if we 
can change a given state into its approximation at each source node, we can assume without loss of 
generality that each source node receives only one of these four states. Thus our task is to send it to 
its required sink node(s) as faithfully as possible, (hi) This can be obviously done by the following: 
Select a one-to-one mapping between the four quantum states and the four letters in £4 and design a 
TP-CP map which simulates the classical operation for £4 at each node. 

Now the question is how to design these quantum operations from its classical counterparts. It 
then turns out that it is not so hard to design "main" operations corresponding to The 
real hard part (the trivial part in the classical case) is to distribute this calculated state into two (or 
more) outgoing edges. The reason is, as one can expect easily, that entanglement is easily involved. 
Since the graph is arbitrarily complicated, there are a lot of different paths from one source to one sink 
which fork and join many times; it seems totally impossible to keep track of how the global entangled 
state is expanding to the entire graph. (In fact we need a lot of effort to cope with this problem even 
for the (very simple) Butterfly network |10|.) 

Our solution to this difficulty is entanglement-free cloning (EFC) that does not produce any en- 
tanglement between two outputs. Formally, EFC is defined as follows. A TP-CP map / is an EFC 
for a set of quantum states Q = {p±, . . . , p m } if there exist p, q > such that, for any p £ Q, 
fip) = (PP + (1 ~~ V)\ ) ® (qp + (1 — q)^)- If such a map exists, we say that Q admits an EFC. 

3.2 Necessary Conditions for EFC 

Now our goal is to find a set of states which admits an EFC. We first prove the following necessary 
condition. 

Proposition 3.1 If a set Q = {pi, . . . ,p m } of quantum states admits an EFC, then pi, ■ ■ ■ ,p m are 

linearly independent (on the vector space M2(C), the set of 2 x 2 matrices on C). 

Proof. Suppose for contradiction that pi, . . . ,p m are not linealy independent. Namely, there exists 
an index j such that pj = Yli^j c iPi- Without loss of generality, we can assume j = m, that is, 



Notice that Y^=i c i = 1 since Tr(p m ) = 1, and that there are at least two non-zero q's since any 
two states are linearly independent on M2(C). Moreover, we can assume that the states of Q \p m 
are linearly independent (otherwise, remove some elements from Q \ p m until it becomes linearly 
independent). 



m— 1 




(1) 



i=l 
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Suppose that Q admits an EFC. Then there is a TP-CP map M such that M(pj) = (pp« + (1 
p)g) <8> (gPi + (1 — (z)|) where p, g > 0. By the linearity of M and Eq. ([!]) we have 



m— 1 



M(p m )=^2 Ci M( Pi ), (2) 



i=l 

which implies the following relation. 

m— 1 



pp m + (1 -p)Q ^ + (1 - g)Q = q (ppi + (1 -p)Q ® (qPi + (i - 
The left-hand side of Eq. ([3]) is rewritten as 

pqPm ® Pm + p(l ~ q)p m ® ^ + ?(1 ~p)^ ®Pm + (1 ~p)(l ~ tf)^ ® ^, 

and the right-hand as 

m—l m— 1 j m—l j m—l j j 

dpi ® pi + p{l - q) ^2 ® - + q(l - p) ^ a- ® p; + (1 - p)(l - q) ^ Cj - ® - 

j=l i=l j=l i=l 

m l j j j j 

(g)pi +p(l - g)p m (8) - + -p)- <g)p m + (1 -p)(l - g)- ® -, 



(3) 



m— 1 

pq 



2 2 

i=l 

where we used Eq.([T]) and X™^ 1 c « = !• Thus, by canceling the same terms we obtain pqp m ig> p m = 
VqY^i=\ c iPi ® Pi' which implies 

Pm 55 Pm 

— YT=i c iPi ® since P9 7^ 0- O n the other hand, 
p m ® Pm = (X^ 1 c iPi)® 2 b y Eq.flT]) and hence we have 

m—l m—l 

®Pi = ^2 c i c jPi®Pj- 

i=l i , j = 1 

Note that the states {pi <8> Pj}7j=i are linearly independent since {pj}™^ 1 are linearly independent. 
Thus, for any i, j G {1, 2, . . . , m — 1} 

Ci if./ , 15 
if j'^i. W 

Obviously q = or 1 for any i G {l,...,m - 1}. Since X^IS 1 c « = 1> there is only one index iq such 
that Cj = 1 and Cj = for all other j. This contradicts the fact that there are at least two non-zero 

Ci'S. □ 

Note that any two different states are linearly independent and thus satisfy the condition. In fact, 
we can show that any set of two states admits an EFC (see Appendix). Unfortunately, two states 
are not enough for our purpose since it is impossible to approximate an arbitrary quantum state with 
fidelity > 1/2. For a set of four states, one can easily see that the BB84 states {|0), |1), |+), |— )}, for 
instance, are not linearly independent and cannot be used, either. 
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3.3 EFC for Four States 



Our solution is to use what we call "the tetra states" defined by |x(00)) = cos#|0) + e" 1 "/ 4 sin#|l), 
|x(01)) = cos0|O)+e- 3OT / 4 sin0|l), |%(10)) = sin 0|O)+e~ l7r / 4 cos 6\1), |x(ll)) = sin#|0)+e 3Mr / 4 cos0|l) 
with cos 2 9 = 7j + ^3 (forming a tetrahedron in the Bloch sphere) . It is straightforward to prove 
that {x(00),x(01),x(10)>x(H)} (where x = |x)(xl) are linearly independent, but we still have to 
design an explicit map (protocol) for EFC. As shown below, our protocol fully depends on the tetra 
measurement, denoted by TTR, which is defined by the POVM (positive operator-valued measure) 
{|x(00), |x(01), |x(10), r;X(ll)}- The following lemma is straightforward: 

Lemma 3.2 TTR on \x{ z i z 2)) produces the two bits z\Z2 with probability 1/2, and the other three 
bits z±Z2, z\Zi, z\Zi with probability 1/6. (z is the negation of z.) Furthermore, the TP-CP map induced 
by TTR, |V) ^ X (TTR(\tP))), is 1/3-shrinking, that is, X {TTR{\^))) = \\^){^\ + §§. 

Now here is our protocol EFC a . The important point is that our cloning works not only for x(X) 
where X € £4, but also for ax(X) + (1 — a)i if the value of a is known in advance. 

Protocol EFC a . Input: p a = ax + (1 — a)| where x € {x(^i^) I z i z 2 G £4}- 

Step 1. Apply the tetra measurement on p a , and obtain the two-bit measurement result X G £4. 
Step 2. Produce the pairs of two bits {Z\, Z2) from the measurement value X according to the 
following probability distribution: (X, X) with probability pi; each of the forms (X,Y) or (Y,X) 
(6 patterns) with probability P2 where Y is a two bit different from X; each of the forms (Y, Y') 
(6 patterns) with probability P3 where Y' is a two bit different from X and Y; each of the forms 
(Y,Y) (3 patterns) with probability p 4 . (If X = 00, for example, (X,Y) = (00, 01), (00, 10), and 
(00,11), (Y,X) = (01, 00), (10, 00), and (11,00), (Y,Y') = (01, 10), (01, 11), (10, 01), (10, 11), (11, 01), 
and (11,10), and (Y,Y) = (01, 01), (10, 10), and (11,11).) Here, pi,P2,Ps,P4 are positive numbers 
depending on a that are determined in the proof of Lemma 13.31 
Step 3. Send \x(Zi)) and |x(^)) to the two outgoing edges. 

Lemma 3.3 For any a > 0, EFC a on input p a produces the output (^x + (l — f ) ^)^ 2 ■ 
Proof. Notice that 

Pi + 6p 2 + 6p 3 + 3p 4 = 1, (5) 

which is the sum of probabilities. Let X = X{ z i z 2) arid suppose z\Z2 = 00 for better exposition. By 
Lemma 13.21 we obtain 00 with probability 1/2 and the other three 2-bits with probability 1/6. Thus, 
at step 1 we obtain 00 with probability a = (l/2)a + (1 — a)/4 = 1/4 + a/4 and 01, 10 and 11 with 
probability b = (l/6)a + (1 — a)/4 = 1/4 — a/12 for each. At step 2, the following four probabilities 
Qi,Q2,Q3 and are important: q\ is the probability that (00,00) is obtained; q2 is the probability 
that each of (00,01), (00, 10), (00, 11), (01,00), (10,00), (11,00) is obtained; q 3 is the probability that 
each of (01, 10), (01, 11), (10, 01), (10, 11), (11, 01), (11, 10) is obtained; q A is the probability that each 
of (01,01), (10, 10), (11, 11) is obtained. 

(00, 00) arises with probability p\ after measuring 00 and with probability P4 after measuring 01, 10 
or 11. We thus have 

qi = api + 3bpi (6) 

and similarly 

q 2 = (a + b)p 2 + 2bp 3 , q 3 = 2bp 2 + (a + b)p 3 , q A = bpi + (a + 2b)p 4 . (7) 
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Now let 



q x = (1/4 + a/12) 2 , q 2 = (1/4 - a/36)(l/4 + a/12), and q 3 = q A = (1/4 - a/36^. (8) 

Then one can easily verify that q\ + Qq 2 + 6(73 + Zq A = 1. Furthermore, the two-qubit state sent to the 
two outgoing links is 

ftX(OO) ® X(00) + g 2 x(00) ® x(01) + g 2 x(00) (g) x(10) + g 2 x(00) x(H) 

+ gax(oi) ® x(oo) + 94X (oi) ® x(oi) + <? 3 x(oi) ® x(io) + <? 3 x(oi) ® x(n) 
+ gax(io) ® x(oo) + 93 x(io) ® x(oi) + ^x(io) ® x(io) + gax(io) ® x(n) 
+ ?2X(H) ® x(oo) + ?3X(H) ® x(oi) + g 3 x(n) ® x(io) + g 4 x(n) ® x(n), 



which equals 



1 a \ /la 

4 + ^ ) X(00) + ( 4 " 36 ) (^(01) +X(10) +X(H)) 



Since x(00) +x( 01 ) +x(10) + x(H) = 2J 5 this can rewritten as 

1 a \ f 1 a \ \ / 1 a\ T a , , / a 

+ ^ - 7 - ^ X(00 + 7 - 27 = -x(00) + 1 



4 12 y V 4 V 4 367 9 v 9/2 

Thus, we obtain the desired two-qubit state. 

What remains to do is to make sure that the values of Pi,p 2 ,P3 and p A satisfying Eqs.dH]),© and 
([8]) are all positive and also satisfy Eq.flSJ). This can be done just by substituting p\ = S1+ ^ 2 +a , 

P 2 = ^ 9 ~"i296 +a ' > ' = < ' 9 ~] t 296 +a ' > anc ^ P A = 9 ~ 432"° ( an °f them are obviously positive for < a < 1) 
into Eqs.([6"]),([71),(|8"D and d5J. Obtaining those values is not so trivial but omitted in this preprint. □ 



3.4 Brief Remarks for the Previous Work 

Recall that quantum cloning for a general state [3j cannot get rid of a lot of entanglement. In [8], Duan 
and Guo developed a probabilistic cloning system for any fixed two (or more) states, which produces, 
from a given state ® \ip) with probability p > and an arbitrarily chosen state, say I ® I, with 
probability 1—p. The technique, also based on the fact that the states are fixed, is beautiful but it is 
quite different from ours in the following two senses: (i) Their output state pij)®ip + (1 — p)^ ® ^ is not 
entanglement-free in the sense of our definition, (ii) Their cloning is impossible for any three or more 
states since they showed that their probabilistic cloning can be done if and only if the pure states to 
be cloned are linearly independent in the sense of the vector space of pure state vectors. (Note that 
the linear independence in Proposition 13.11 is about the vector space of 2 x 2 matrices.) 



4 Our Protocol and Its Analysis 

4.1 Formal Description of the Protocol 

Recall that our current problem is as follows. 

Input: A graph G and its CNC protocol Pc{G) 
Output: A QNC protocol Pq(G) which simulates Pc(G). 

We first show a technical lemma about the input graph G and protocol Pc(G). A degree-3 (D3) 
graph is defined as follows: It has five different kinds of nodes, fork nodes, join nodes, transform 
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Figure 4 

nodes, source nodes, and sink nodes whose (indegree, outdegree) is (1,2), (2, 1), (1, 1), (0, 1) and (1,0), 
respectively. The classical protocol Pq(G) for a D3 graph is called simple if the operation at each node 
is restricted as follows: (i) The input is sent to the outgoing edge without any change at each source 
node, (ii) The incoming value is just copied and sent to the two outgoing edges at each fork node, 
(hi) The operation of each transform node is constant, one-to-one, or two-to-one. (iv) The operation 
of each join node is the addition (denoted by +) over Z2 © I2 or Z4. (v) The sink node just receives 
the incoming value (no operation). 

Lemma 4-1 Without loss of generality we can assume that the input of our problem is a pair of a 
D3 graph and a simple protocol. 

Proof. Assume that a (general) graph G and a protocol Pc(G) are given. Then, we transform G 
and Pq(G) into a 3D graph and a simple protocol as follows. If a source node s has m > 2 inputs, 
then we add m parent nodes to s as new source nodes that have one input for each. Notice that s is 
no longer a source node. Similarly, if a sink node t requires m > 2 inputs, add m child nodes to t as 
new sink nodes. Then, the operations of new sources and sinks clearly satisfy restrictions (i) and (v). 

Next, we decompose nodes of degree > 4 into fork and join nodes, and adapt the classical protocol 
to the graph changed by the decomposition. This is possible since we only consider the operation in 
the form of Y^ILi hi(Xi)- For example, Fig. 3 is the decomposition of a node such that its (indegree, 
outdegree) is (3,2) and the operations for two outgoing edges are f(X,Y,Z) = a±X + b{Y + c\Z 
and g(X,Y,Z) = a2X + 62^ + C2Z, respectively. Then, we obtain a D3 graph but we need more 
transformation to obtain a simple protocol. Now the join node has an operation of the form f(X, Y) = 
h\(X) + h,2{Y). Recall that since our original graph is in Q4, h\ and h,2 are constant, two-to-one, or 
one-to-one mapping. We decompose such a join node into two transform nodes U\,U2 and a new 
join node U3, and design the corresponding protocol as follows: u\ and U2 are the parents of 113, the 
operations of u\, U2 and U3 are hi, /12 and +, respectively. Then, the new graph is still a D3 graph 
and the new protocol satisfies restrictions (hi) and (iv). What remains to do is to satisfy restriction 
(ii). For this purpose, we delay the operations of a fork node, which are written as h{X) for each 
operation of two outgoing edges, until the next transform node (if the next node is a sink, insert an 
extra transform node before the sink). Finally, we have obtained a D3 graph G' and the corresponding 
simple protocol Pc(G'). 

We design a quantum protocol for the input (G', Pc(G')) by the algorithm given below. Then 
it is easy to change the protocol back to the protocol for the original graph G by combining all the 
decomposed operations for a node of G into a single operation. □ 

Now we are ready to present our protocol Pq(G), which is given by the following algorithm (Q(v) 
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is the operation at a node v, and a(v) is the shrinking factor at that node). 
Algorithm for designing Pq(G). 

Step 1. Determine a total order for the vertices of G by their depth (= the length of the longest 
path from a source node). Break ties arbitrarily. Let v±, 1)2, ■ ■ ■ ,v r be their order. 
Step 2. For each v = v±, v%, . . . ,v r , do the following: 

If v is a source node then let a(v) = 1 and let Q{v) = [Apply TTR for the source, obtain the 
measurement value x\X2 G £4 and send x{ x i x 2) to its child node]. 

Else if v is a join node then let a(v) = (l/9)a(vi)a(v2) where v± and V2 are v 's parent nodes, 
and let Q(v) = [Apply TTR for the two source states, obtain measurement values X1X2 G £4 and 
yi2/2 G £4, and send x( x i x 2 + 2/12/2) to its child node]. 

Else if v is a transform node then let g be the corresponding operation in Pc{G). 

If g is a constant function, i.e., g(-) = X1X2 G £4 then let a(v) = 1 and Q(v) =[Send 
X(x\X2) to its child]. 

Else if g is a one-to-one function then let a(v) = a(vi)/3 for the parent node v\, and 
Q(v) =[Apply TTR for the source state, obtain the measurement value x±X2 G £4 and send x(9( x i x 2)) 
to its child]. 

Else (i.e., g is a two-to-one function) let a(v) = g"^ 1 ^ for the parent node v\ and 
Q(v) =[Apply TTR for the source state, obtain the measurement value x±X2 € £4, send x(,9( x i x 2)) to 
its child with probability 6 _^) and send x(UiU2) and x{ z i z 2) to its child with probability 2(6-^a(v)) 
for each, where {2/12/2, ^1^2} = S4 \ Range(g)]. 

Else if v is a fork node then let a{v) = (l/9)a(t>i) for the parent node v\, and Q{v) =[Apply 
EFC a ( v \ for the incoming state and send the resulting two-qubit state to its child nodes]. 

Else (i.e., v is a sink node) Q(v) =[Do nothing]. 

Our key lemma is as follows. The proof is given in the next subsection. 

Lemma 1^.2 (i) The value a(u) calculated in the above algorithm is positive for any vertex u € V. 
(ii) Suppose that Pc(G) produces output values y G £4 at node u G V (actually the value of the 
outgoing edge from u) from input values (x\, . . . , x n ) G S4. Then, if we supply input states x( x i) to 
source node s« for i = 1, . . . ,n, then Pq(G) produces the state a(u)x(y) + (1 — a(u))^. 

Now we state our main theorem. 

Theorem 4-3 (Main theorem) Suppose that Pc(G) is the same as Lemma \4-2\ and suppose that we 
supply (general) input states \tpi), ■ ■ ■ , \4>n)- Then if Pq(G) produces output states pi,...,p m , the 
fidelity between pi and |VV(i)) * s law er than 1/2. 

Proof. Let s be the source node that has \ip a (i)}i and t be the sink that receives Pi by Pq(G). By 
TTR at s we obtain probabilistic mixture of the four states, p = ax(00) + &x(01) + cx(10) + c?x(ll). 
By Lemma [4.2l (note that the value of a(u) does not depend upon the input states x{ x i)) an d linearity 
we can see that pi = a(t)p + (l-a(t))i. By LemmaE21 the TP-CP map induced by TTR transforms 
lVV(i)> to !|VV(i))(^<T(i)l + If (= p). Thus, pi is written as Pi = ^-\^a(i))(^a(i)\ + (1 - ^)|- Hence 
we can conclude that the fidelity at t is \ + \ ^jp, which is strictly larger than 1/2. □ 
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4.2 Proof of Lemma 14.21 



It is obvious by the algorithm that a{u) > for all u € V. To prove (ii), we need to know what 
happens at each node. We already know the effect of a fork node which is given in Sec. [3l To know 
the effect of a join node and a transform node, we show two lemmas. The first lemma is for a join 
node. 

Lemma 4-4 Assume that p x = ax{x\X2) + (1 — a) % and p y = PxiyiVz) + (1 ~~ &)\ are sent to a join 
node. Then, the output state is ^a(3x(x±X2 + 2/12/2) + (1 — §a/3)|. 

Proof. Recall that the operation at a join node is the addition over Z2 ©Z2 or Z4. Let / be one of 
such additions. Then one can see that the matrix Mf = (f(X, Y)) has the property that each value in 
£4 appears exactly once in each column and in each row. See Fig. 4 for the case of Z2 © 1>2- Suppose 
for example that x\xi = 2/12/2 = 00. Then, by Lemma f3T2l TTR on p x (resp. p y ) produces 00 (resp. 
00) with p a = a/2 + (1 - a)/4 (resp. pp = (3/2 + (1 - /3)/4) and other 01, 10 and 11 with probability 
q a = a/6 + (1 - a)/4 (resp. qp = (3/6 + (1 - /?)/4) for each. Note that /(00, 00) = 00, which appears 
at four different positions of the matrix whose total probability is r\ = p a Pp + 3q a qp. Similarly, 
the value 01 (similarly for 10 and 11) appears at four different positions whose total probability is 
Ti = p a qp + Ppq a + 2ppqp. By simple calculation, we have r\ = 1/4 + a/5/12 and r2 = 1/4 — a/3/36, 
and therefore the output state can be written as 

(\ a(3\ , . (\ a(3\ . , _. , . . ad ( a(3\ I 

I 4 + 12 ) x ^ lZ2 > + ( 4 ~ 36 J (X{ziZ2) + X{ziZ2) + X(ziz2)) = yXl/^i^, 2/12/2)) + I 1 - — I ^. 

□ 

The second lemma is for the transform node. 

Lemma 4-5 Assume that ax(Z) + (1 — a)^ is sent to a transform node whose operation in Pq[G) 
is g. Then, the output state is x(^o) if 9 is a constant function g(-) = Zq, (a/3)x{g(Z)) + (1 — 
if g is one-to-one, and qz^x(9(Z)) + ^1 — g^j) I 9 ^ s two-to-one. 

Proof. The case that g is constant is trivial. The case that g is one-to-one is also easy since TTR is 
the 1/3-shrinking map (changing the state by g does not lose any fidelity). Thus, it suffices to analyze 
the case that g is two-to-one. Assume that Z' is the unique element different from g(Z) in Range(g). 
(It might help to consider an example such as g(00) = <?(01) = 00, <?(10) = g(ll) = 10, Z = 00 and 
Z' = 10.) The tetra measurement gives us Z with probability 1/4 + a/4 and the other three elements 
with probability 1/4 — a/12 for each. This means that by the calculation of g we obtain g(Z) with 
probability \ + % + \ — % = 1/2+ a/6 and Z' with probability 2 X (| — ^ ) = 1 / 2 — a/6. By our protocol, 
we obtain x(g(Z)) with probability (± + f )g^ = X (Z') with probability (i - f )^ = , 

and the other two tetra states xO^i) an ^ XO^) with probability 2 ^ 3 6 ~^ t x ■ Therefore, the output state, 
which is their mixed state, is 

*±^L x (s(z)) + -^-Ot(z') + X (yi) + X (Y 2 )) = ^x(g(z)) + f 1 - ^) i 

2(6 — a) 2(6 — a) o — a \6 — a/2 

This completes the proof. □ 

Now we prove Lemma 14.21 by induction on the depth of nodes. First, consider a node u of depth 
1, which has the three cases. 
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(Case 1-a: u is a fork node.) Let x( x i x 2) be the state sent from a source node s. By EFC\ the 
state \xi x i x 2) + || is sent to each of the next two nodes. This clearly satisfies the statement of the 
lemma since a(u) = (1/9)q(s) =1/9 (notice that a(s) = 1 for any source node s) by the algorithm 
for designing Pq(G). 

(Case 1-b: it is a join node.) Let x( x i x 2) and xiyiUz) be the states sent from two source nodes s% 
and S2- By Lemma R~41 we obtain ^x( x i x 2 + 2/12/2) + §§ • This satisfies the statement of the lemma 
since a(u) = (l/9)a(si)a(s2) = 1/9. 

(Case 1-c: u is a transform node.) Let x( x i x 2) be the state received from a source node s. By 
Lemma 1131 we obtain the state x(Xo) if the operation / at u in Pc(G) produces a constant Ao € £4, 
(l/3)x(xix 2 ) + (2/3) (1/2) if / is one-to-one, and (l/5)x(x 1 x 2 ) + (4/5)(J/2) if / is two-to-one. By 
definition, we can see that a(u) = 1, 1/3 and 1/5 (= gt^y) if i* is constant, one-to-one, and two-to-one, 
respectively. Thus, the statement of the lemma holds. 

Next, we show that the statement of the lemma holds for any node u at depth d under the 
assumption that it holds for depth < d — 1. 

(Case d-a: u is a fork node.) By assumption, u receives a state a{v)x{x\X2) + (1 — a(v))i from 
the parent node v, where X1X2 € S4 is received at u in Pq{G). In the protocol Pq(G) this state is 
transformed by EFC a i v \. By Lemma EOl the output state is (^ x{ x i x 2) + (1 — § )f ) • Our algorithm 
says a/9 = (l/9)a(v) = a(u). Thus, the statement of the lemma holds at u 

(Case d-b: u is a join node.) By assumption, u receives two states a{vi)x{ x i x 2) + (1 — a ( v i))^ an d 
a ( v 2)x(yiV2) + (1 — a ( v 2))j from the parent nodes v\ and V2, where X1X2 and yiyz in S4 are sent from 
v\ and V2 to u in Pc(G), respectively. Then, by Lemma ELH1 the output state is \ct(vi)a(v2)x{ x i x 2 + 
2/12/2) + (1 — ^ct(vi)a(v2))^- This satisfies the statement of the lemma since ^a{vi)a{v2) = a(u) by 
our algorithm. 

(Case d-c: u is a transform node.) By assumption, u receives a state a(v)x{x\X2) + {l — a(v))£ from 
the parent node v, where x\X2 € £4 is received at it in Pq{G). Let 5 be the operation at u in Pq{G). 
Then, by Lemma H~5l the output state is x(g( x i x 2)) if 9 is constant, ^pX^^i 3 ^)) + (1 — 3^)5 ^ 5 
is one-to-one, and 6 "^) X(g(^i^2)) + ^1 — 6-a(i) ) 2" ^ ^ ^ s two-to-one. This satisfies the statement 
of the lemma since for each of the three cases the shrinking factor is a(u) by our algorithm. 

Therefore, by induction we have shown Lemma 14.21 

5 Concluding Remarks 

Apparently there remains a lot of future work for EFC. First of all, we strongly conjecture that the 
condition of Proposition 13. H is also sufficient. The optimality of our EFC is another interesting research 
target. We also would like to study the opposite direction on the relation between CNC and QNC, 
i.e., whether we can derive a CNC protocol from a QNC protocol. 
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A Appendix. Possibility of EFC for Two States 

In this Appendix, we prove that any two pure states (and their shrinking states) admit EFC. 

Proposition A.l Let |^o) and \tfji) be any different qubits, and let Q = {p|V ; o)(' i /'o|+(l — p)^,p\ipi)(ipi\+ 
(1 — p)f } where p > 0. Then Q admits EFC. 

To prove Proposition IA.ll we first show a lemma which states that any two states which are the 
"shrinked" states of \ip), \tp } admit EFC where \i/j ± ) is the orthogonal state to \ip). 
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Lemma A. 2 Let \tp) and \ip ) be any orthogonal qubits. The set Q c = {p\tp) p)^^]^ 1+ 

(1— p)^}, where p > 0, admits EFC. In fact, there exists an EFC protocol, denoted as EFCo2 p , which 
produces output (|p + (1 — l)^) 82 for a given input p £ Q c . 

Proof. By the symmetry of the Bloch sphere, it suffices to prove the statement for = |0) and 
\ip ) = We then implement the following protocol EFCo2 p . 

Protocol EFCo2 p . Input p = p\x)(x\ + (1 — where x G {0, 1}. 
Step 1. Measure p in the basis {|0), |1)}, and obtain a bit X. 

Step 2. Produce the pair (>i, Y2) according to the following probability distribution: (X, X) with 
probability pi = l/2+p 2 /16, (X,X) and (X,X) with p 2 = l/A-p 2 /\Q for each, and (X,X) with 
P3 = P 2 /16. 

Step 3. Output \Yi) and \Y 2 ). 



After step 2, EFCo2 p produces the pair of bits with the following probability distribution: (x,x) 
with probability q\ = (1/2 +p/2)p\ + (1/2 — p/2)p 3 = (l/2 + p/4) 2 , (x,x) and (x,x) with probability 
q 2 = (1/2 +p/2)p 2 + (1/2 -p/2)p 2 = (1/2 + p/4)(l/2 -p/A) for each, and (x,x) with probability 
q 3 = (1/2 +p/2)p 3 + (1/2 -p/2)pi = (1/2 -p/A) 2 . Thus, the final output state is 

<g) +q , 2(|^)(^| <8> \x){x\ + \x)(x\ <S> |^)(^|) +Q3\x)(x\ <8> 

1 p\ (\ p \ _ _ x ® 2 

which equals to ((p/2)\x)(x\ + (1 -p/2)|) 02 . □ 
Using Lemma I A. 21 we can prove Proposition lA.il 



Proof of Proposition lA.li By symmetry of the Bloch sphere, we prove the statement for \ip$) = 
cos#|0) + sin#|l) and = sin#|0) + cos#|l) where < 9 < 7r/4. We then implement the following 
protocol EFC2 p . 

Protocol EFC2 p . Input p = p\i/j x ) (ip x \ + (1 

Step 1. Measure p in the basis { 1 0), 1 1}}, and obtain the state p' = p(cos 2 9\x)(x\ + sin 2 9\x)(x\) + 
(1 - p )L = pcos29\x)(x\ + (1 -pcos26»)|. 

Step 2. Apply EFCo2 pcos2e to p', and obtain the two-qubit state p" = (^pl\x){x\ + (1 - 
Step 3. For each qubit a of p", do the following: output |+) with probability q and a with 
probability 1 — q where q is the positive number determined from p and 9 (seen in the later analysis). 

We show that EFC2 p outputs a desired state {r\il) x )(' t l ) x \ + (1 — r)^)® 2 for some r > 0. It is easy 
to check that p" is obtained at step 2. So, we consider what state we obtain after step 3. After step 
3, each of two qubits is 

q(l 1\ / | + (-lf^ \ 
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which should be in the form of r\^) x )i^) x \ + (1 — r)|. To satisfy this, it suffices that the following 
equations hold. 

r sin 6 cos 9 = q/2 

In fact, we can obtain such positive numbers q and r by solving the equations. This completes the 
proof. □ 

Furthermore we can show that, for any set Q = {p\,p2} of two mixed state, Q admits EFC. Its 
proof is given by a similar way to the proof of Proposition I A. II while we need one extra step as follows: 
(i) By the measurement in a suitable basis, we change the two states Pi,P2 into "orthogonal" states 
p[ = a\ip){ip\ + (1 - a) I and p' 2 = [3\%l) ± ){'il) ± \ + (1 - /3)|. (ii) H a ^ (3 (say, a > (3), change the two 
orthogonal states to 7|-0) (-01 + (1 — 7)5 ana - r y\ t f J± )( t f J± \ + (1 — 7)^ : To do so output the fixed state {ip- 1 ) 
with some probability and the obtained state with the remaining probability, (iii) Apply EFCo2 p 
with a suitable p. (iv) By outputting \ip) with some probability, the states can be the shrinking states 
of Pi and p' 2 . (iv) Return the angle between the obtained states to that of the original two states p\ , P2 
as step 3 in EFC2 p . We can show that this works correctly but omit the verification. 
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